Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ylQgcoH1UN8w9fT8Pgm9y-L9IvQ.cer
File:                     ylQgcoH1UN8w9fT8Pgm9y-L9IvQ.cer (raw, json)
Hash identifier:          G5E8YnT4DwdmWWdTVh56klM+bgUqDKn4+o52yLBfibg=
Subject key identifier:   CA:54:20:72:81:F5:50:DF:30:F5:F4:FC:3E:09:BD:CB:E2:FD:22:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018571D64D62073B58723BD19638175625E2
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/9f/49f718-7d54-4d6f-b792-74ec48d91b87/1/ylQgcoH1UN8w9fT8Pgm9y-L9IvQ.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/9f/49f718-7d54-4d6f-b792-74ec48d91b87/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 09:35:48 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 193.57.166.0/24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d6:4d:62:07:3b:58:72:3b:d1:96:38:17:56:25:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:35:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ca54207281f550df30f5f4fc3e09bdcbe2fd22f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8d:f0:03:c3:29:03:7f:45:37:a4:11:e3:f5:
                    ac:e2:3f:2e:d5:09:5f:4a:6b:e0:04:22:75:42:cc:
                    55:44:b7:b2:3a:13:8c:35:4c:95:61:ee:e9:46:9e:
                    66:79:2f:23:92:1c:19:7e:54:73:03:40:3d:85:da:
                    c5:a3:05:a3:b5:84:cf:14:8c:b2:3b:a1:f6:ae:0f:
                    67:3a:2b:4f:f2:74:dd:47:f1:34:2e:37:c8:f5:94:
                    b2:a3:b7:b1:3b:c5:ad:a4:1b:cc:6c:11:c2:86:8d:
                    09:ae:54:da:97:4c:47:b4:68:20:36:36:20:1a:a4:
                    d7:d0:95:da:b0:e8:8d:e0:af:5b:5b:92:58:ea:9b:
                    5b:5f:da:44:8e:80:bf:2e:41:1c:d8:b1:a8:ad:8d:
                    09:74:ef:f9:d1:c6:87:cf:5d:7e:4c:ee:0f:8f:66:
                    d6:0f:b6:96:bd:55:9f:4d:0a:43:2c:a5:78:76:c8:
                    1d:f9:9b:68:bf:75:c8:35:e4:65:51:0a:b7:ac:af:
                    1f:15:d2:b5:d9:a4:49:60:d6:04:f2:1e:c2:b7:1d:
                    30:35:5d:83:49:8f:39:49:2e:f5:a1:2e:23:15:59:
                    98:0c:aa:68:ea:bd:f4:c3:f1:49:ff:70:37:c0:43:
                    28:b5:8f:c6:a7:40:1f:12:aa:9b:7d:80:09:fe:d0:
                    59:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:54:20:72:81:F5:50:DF:30:F5:F4:FC:3E:09:BD:CB:E2:FD:22:F4
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49f718-7d54-4d6f-b792-74ec48d91b87/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49f718-7d54-4d6f-b792-74ec48d91b87/1/ylQgcoH1UN8w9fT8Pgm9y-L9IvQ.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.57.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:e9:45:bb:19:07:f9:da:84:56:9f:b7:ec:81:49:8d:6c:3f:
         a5:10:0f:33:b6:ac:ea:4c:71:dc:8b:cb:ed:09:b4:84:6c:08:
         b6:63:0e:8c:1f:7c:be:15:00:d2:8e:09:8c:61:5a:db:a1:d6:
         66:ea:c0:31:40:60:65:a7:36:5d:59:2c:d6:23:86:01:69:a8:
         b3:2e:bf:b9:51:48:44:5b:0e:9c:ba:7f:ad:10:6f:07:b8:65:
         ad:a5:e8:1c:f2:b5:04:a9:a4:c0:b6:6f:c5:f4:4e:48:77:08:
         49:8c:1f:7c:6c:8f:fa:19:82:ac:5a:8a:ca:a0:98:cc:0e:56:
         b8:cd:69:ac:96:f6:2a:f9:da:10:e1:76:0d:79:29:3d:88:a5:
         fb:07:b8:c6:99:5c:65:ec:6c:f8:2f:6c:50:a4:c8:bb:0e:f5:
         b3:fb:5d:34:9f:27:2a:95:6b:24:cc:e5:8d:36:e6:5f:0c:d0:
         c2:b6:96:a1:ba:01:b5:55:99:28:d6:bd:19:7b:81:09:67:1d:
         f6:fa:18:2e:92:55:b2:98:2a:55:ff:14:46:ad:ab:68:b2:01:
         f7:ae:eb:4d:4f:5a:3a:9f:61:58:b7:ea:4c:d4:92:17:b0:e6:
         49:e6:21:c6:8c:ee:a0:d8:0c:4a:f3:84:d0:ae:c4:bc:a8:c8:
         ee:d7:ae:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----